ITR: Knowledge-Based Inference Techniques to Ensure the Security of Database Content

如果数据库一般都能通过网络访问，那么它们的效用就会大得多。 但这种网络可用的数据库面临着严重的安全挑战。 用户可以对来自多个数据库的信息使用推理技术来获得这些数据库都不会直接泄露的数据。我们建议通过在目录处建立推理保护系统（例如，标准资源描述框架（RDF）。 系统将要求发送到存储数据库的站点的所有请求都通过RDF目录站点提交。 因此，本网站将能够观察所有请求的信息内容。 通过对每个用户提交的请求进行适当的记录，并利用有关数据库模式、内容和导致安全违规的模式的知识，该网站将能够检测到个人用户何时试图使用数据挖掘技术来推断他无法直接获得的信息。 一系列的实验数据跟踪从真实的应用将被用来评估所提出的系统的有效性。

The utility of databases could be much greater if they were generally accessible across a network. But such network-available databases face serious security challenges. Users can use inference techniques on information from multiple databases to obtain data that none of these databases would directly divulge.We propose to build a system to protect network-accessible databases form this threat by establishing an inference protection system at the directory (e.g., the standard resource description framework, RDF) site. The system will require that all requests, sent to sites that store the databases, be submitted through the RDF directory site. As a result, this site will be able to observe the information content of all requests. By keeping proper records on the requests submitted by each user, and by using knowledge about database schema, contents and patterns leading to security violations, this site will be able to detect when an individual user is attempting to use data mining techniques to infer information that he could not obtain directly.A test bed of the proposed security violation protection system will be constructed. A series of experiments with data traces from real applications will be used to evaluate the effectiveness of the proposed system.